Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: fltF5NsSGKMDmIVkR2soPCaffXVNbnQ+CNDe3M9h/Vs=
Subject key identifier: D0:BF:6B:81:12:71:BC:6B:B8:D3:95:1D:B8:7E:53:94:47:E4:DB:A1
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 019FAB63A740783C3A8E2194AEA9DC16A1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 01:01:02 +0000
Manifest this update: Wed 29 Jul 2026 01:01:02 +0000
Manifest next update: Thu 30 Jul 2026 01:01:02 +0000
Files and hashes: 1: 4Yk_IaIMOFlSvQlmWzU3D7V9Ww0.roa (hash: 95l63lLqTUI0fetfFavGHFZZGMfnTIwSEKulFFxrxpc=)
2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: iU1wImDZt5bX1FgFKWyC+2c/OlQ4eDuTnrAIC2GWIyM=)
3: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (hash: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4=)
4: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (hash: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY=)
5: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (hash: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38=)
6: ogEjhX2zW6tgVtz_pOmSPCqvyBk.roa (hash: dF9i4unUQNdYa+sgOQav50pelR9XCvdYshIMM/dzsiM=)
7: sD8yyKxgqD60hgzKcX-gPGQxeh4.roa (hash: //5uDqVbcxyKWzTpZS8757S/2Ry/Wbbw/UQbM8VY0LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:a7:40:78:3c:3a:8e:21:94:ae:a9:dc:16:a1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jul 29 01:01:02 2026 GMT
Not After : Jul 30 01:01:02 2026 GMT
Subject: CN=d0bf6b811271bc6bb8d3951db87e539447e4dba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:7d:22:e2:60:64:db:c4:c9:62:6f:5e:9e:
0b:1d:43:a9:b0:d3:c9:49:2d:15:75:12:bc:7d:85:
19:3c:79:00:2b:55:74:1b:2d:c3:e8:91:5c:4d:8e:
76:cf:f7:6f:1d:d4:a7:38:14:27:eb:61:5d:9f:92:
97:48:62:22:37:47:90:9c:3d:1d:cc:63:6c:6b:91:
90:4a:55:a5:bc:32:45:6e:31:62:c3:2a:6c:b8:26:
d6:b5:01:00:41:da:fe:72:fd:5c:c5:57:bb:87:d9:
df:71:a1:86:05:62:c1:31:94:b4:6f:6e:f4:ab:fe:
90:f4:e5:b1:60:e3:2b:47:d6:41:df:0a:4d:57:c6:
16:d2:05:d8:05:d2:e3:3c:59:00:5b:2f:c9:44:fb:
70:d3:da:d2:48:82:31:3d:35:ee:b3:73:89:e9:80:
05:30:e0:66:3a:38:20:e6:ec:58:9c:ba:a3:be:ee:
c9:dd:14:1a:96:2e:fe:a5:2b:85:30:14:ba:2b:a3:
24:82:ca:c6:b0:d7:93:da:88:1c:95:f0:a7:8a:53:
09:b4:c7:05:04:10:dc:e0:51:e7:e7:6e:e3:96:dd:
49:a7:a2:97:66:fe:77:b5:12:32:4d:a2:54:b7:03:
26:44:56:ab:6c:af:5d:d7:8e:15:e9:18:a7:61:3e:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:6B:81:12:71:BC:6B:B8:D3:95:1D:B8:7E:53:94:47:E4:DB:A1
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ef:e4:98:c3:4f:f8:8b:2f:e8:ed:8a:d7:36:58:32:5a:da:
f9:69:49:9d:3d:a2:c6:b0:46:60:b8:24:aa:0b:7e:7d:d9:c7:
81:30:94:df:10:6c:68:b7:dd:f7:42:66:33:04:af:7d:de:ee:
cc:f9:e4:cc:6f:96:5b:e5:35:57:20:66:b0:01:8a:a2:40:e5:
34:95:f7:91:80:3e:ef:f1:68:ec:0b:1b:51:85:8c:85:66:7c:
4d:4e:b8:a5:3a:d8:6b:4b:fc:83:b7:1b:c8:f2:a5:29:20:bc:
b2:3a:71:fd:ef:62:0a:ad:9e:15:ed:83:3e:d9:6b:77:f8:e8:
f3:2b:b1:06:05:8f:aa:37:f4:36:36:e7:0b:2f:5b:f9:1f:96:
4f:cd:ac:55:c6:38:c1:75:c6:f5:12:0f:7e:fd:b4:d7:b3:b0:
67:b3:12:a4:f5:4f:dc:a0:b1:4d:c2:cb:8d:c6:d9:b4:24:d7:
39:de:af:a9:31:f0:83:93:89:85:e1:c9:bb:30:00:c7:7c:29:
5f:32:d5:6e:bf:47:d8:9e:6b:f7:8d:3f:65:4f:40:b1:8a:59:
13:bc:57:52:0d:48:d4:79:ed:89:07:f9:91:21:84:58:e1:5e:
6b:46:21:cb:bc:36:eb:ac:a6:a6:44:20:4e:18:84:a4:47:dd:
b3:a3:c7:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY6dAeDw6jiGUrqncFqHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy
ZDE2MGMwHhcNMjYwNzI5MDEwMTAyWhcNMjYwNzMwMDEwMTAyWjAzMTEwLwYDVQQD
EyhkMGJmNmI4MTEyNzFiYzZiYjhkMzk1MWRiODdlNTM5NDQ3ZTRkYmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0R9IuJgZNvEyWJvXp4LHUOpsNPJ
SS0VdRK8fYUZPHkAK1V0Gy3D6JFcTY52z/dvHdSnOBQn62Fdn5KXSGIiN0eQnD0d
zGNsa5GQSlWlvDJFbjFiwypsuCbWtQEAQdr+cv1cxVe7h9nfcaGGBWLBMZS0b270
q/6Q9OWxYOMrR9ZB3wpNV8YW0gXYBdLjPFkAWy/JRPtw09rSSIIxPTXus3OJ6YAF
MOBmOjgg5uxYnLqjvu7J3RQali7+pSuFMBS6K6MkgsrGsNeT2ogclfCnilMJtMcF
BBDc4FHn527jlt1Jp6KXZv53tRIyTaJUtwMmRFarbK9d144V6RinYT7cOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC/a4EScbxruNOVHbh+U5RH5NuhMB8GA1UdIwQY
MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt
YjU3MDkwN2I1OWViLzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi
LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae/kmMNP
+Isv6O2K1zZYMlra+WlJnT2ixrBGYLgkqgt+fdnHgTCU3xBsaLfd90JmMwSvfd7u
zPnkzG+WW+U1VyBmsAGKokDlNJX3kYA+7/Fo7AsbUYWMhWZ8TU64pTrYa0v8g7cb
yPKlKSC8sjpx/e9iCq2eFe2DPtlrd/jo8yuxBgWPqjf0NjbnCy9b+R+WT82sVcY4
wXXG9RIPfv2017OwZ7MSpPVP3KCxTcLLjcbZtCTXOd6vqTHwg5OJheHJuzAAx3wp
XzLVbr9H2J5r940/ZU9AsYpZE7xXUg1I1HntiQf5kSGEWOFea0Yhy7w266ympkQg
ThiEpEfds6PH3A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:44 2026 by rpki-client